A new wave of malware on npm: Installing a package can lead to data loss

Overview In recent years, software supply chain attacks have become one of the most serious threats to the modern software development ecosystem. Instead of directly attacking the target system, attac